Legal

Privacy Policy

Version 1.0 · July 2026 · GreyCliff Industries Inc., Kettering, Ohio

The design principle: your mission data lives on your node, on your machine. It reaches our server only when you deliberately share it — and you can hide even your node's position. SABRE was built for people who care where their data goes; this policy mostly describes how little of it we hold.

1. What we collect

Account data — username, email address, hashed password (we cannot read your password), plan and approval status, and a record of which Terms version you accepted and when.
Node telemetry — when a node is connected: its online status, health (heartbeats, ping), and position. Position reporting has two independent off-switches: the account-level "do not show or track this system's location" setting, and the node's SHARE LOC toggle (which stops the coordinates from ever leaving your machine).
Content you explicitly share — missions you SHARE TO GROUP and messages you send (direct, group, or mission threads), including any map points attached to them. Nothing you build on a node is uploaded without that explicit act.
Data requests — when your node asks the server for weather, airspace, or map data for an area, the request necessarily includes that area. These are used to answer the request and for operational logs, not to build profiles.
Security logs — authentication events (sign-ins, failures, administrative actions) with IP addresses, kept for security auditing.

2. What we do NOT collect

Mission plans, routes, drop computations, tracks, or offline map caches that you have not explicitly shared — they stay in your node's local data folder.
Analytics profiles, advertising identifiers, or tracking cookies. The only cookie is your session token.
Payment card numbers — when paid plans launch, payment is processed by a payment provider; card details never touch our servers.

3. How we use information

To operate the Service: authenticate you, show node status to your account (and your group, where you share), deliver messages to their recipients, answer data requests, notify administrators of registrations, send service email (via our email provider), and secure the platform. We do not sell or rent personal information, and we do not use your operational content for marketing or model training.

4. Sharing and visibility

Content you share is visible to the audience you chose: a shared mission to its group's members; a message to its recipients; your node's position (if enabled) to signed-in users of this server. Administrators of this server can see account records and, where necessary for support or moderation, shared content.

5. Retention and deletion

Deleting a group deletes its shared missions and its message threads.
Deleting a shared mission deletes it and its thread.
Deleting an account removes the account record and revokes its nodes.
Security logs are retained for a limited period for audit purposes.
Node position is held as live state — it is not a stored movement history.

6. Where data lives

This hosted service runs on U.S. cloud infrastructure (currently Linode/Akamai) behind Cloudflare; service email is delivered via Resend. Organizations with stricter requirements can run the SABRE server entirely on their own infrastructure — in self-hosted deployments GreyCliff holds none of the data described here.

7. Security

Passwords are stored using strong one-way hashing; sessions and node credentials use signed tokens that are revocable server-side; administrative actions are audited; transport is encrypted (HTTPS/WSS). No system is perfectly secure — report suspected issues to the contact below.

8. Your choices

Turn off position sharing at the account level or at the node (SHARE LOC).
Share missions only when and where you choose; leave groups at any time.
Request account deletion or a copy of your account data via the contact below.

9. Changes and contact

Material changes will be posted here with a new version number. Questions or requests: GreyCliff Industries Inc., Kettering, Ohio · [email protected]